Securosis analysts Rich Mogull, Adrian Lane and Mike Rothman tackle the key themes for this year’s RSA 2010 conference — virtualization/cloud security, advanced persistent threats/cybersecurity and compliance.
Researchers are preparing to release a free tool to stop
“drive-by” downloads: Internet attacks in which the mere act of
visiting a Web site results in the surreptitious installation of
malicious software. The new tool, called BLADE (Block All Drive-By
Download Exploits), stops downloads that are initiated without the
user’s consent. Read the full article. [Technology Review]
Twitter users were hit by potent phishing attacks over the weekend that have already led to spam runs from compromised accounts. Read the full article. [The Register]
Mainstream attention to Operation Aurora and the Kneber (Zeus) botnet are welcome. It underscores how the Internet underground has advanced to the point where a plethora of
powerful hacking tools and services is readily available to novice
hackers and elite crime gangs alike – with prices to fit every
budget. Read the full article. [The Last Watchdog]
Czech security experts say they have uncovered
a global botnet that may be redirecting Web surfers to other sites for
the purpose of stealing their data.
The botnet’s creators have dubbed the network “Chuck Norris” after the famous Hollywood actor and martial arts expert. Read the full article. [Dark Reading]
How did the Kneber botnet manage to stay beneath the radar? Who’s behind it?
Is it an isolated underground project, or a part of the malicious
portfolio of a cybercrime organization diversifying on multiple fronts
within the underground marketplace? Read the full article. [ZDNet]
More than 74,000 PCs at nearly 2,500 organizations around the globe
were compromised over the past year and a half in a botnet infestation
designed to steal login credentials to bank sites, social networks, and
e-mail systems, researchers have discovered. Read the full article. [cnet]
The Mozilla developers have announced the release of version 3.5.8 and 3.0.18 of their open source Firefox web browser. In addition to the usual bug fixes and stability improvements, the updates address a total of five vulnerabilities, three of them rated critical. Read the full article. [The H Security]
OpenOffice.org has shipped a new version of the desktop productivity suite to patch six vulnerabilities that could expose users to malicious hacker attacks.The flaws fixed in OpenOffice.org 3.2 could be exploited via GIF, XPM files and Microsoft Word document processing, according to an advisory released by the open-source group.
During the simulated cyber attack that took place yesterday in Washington and was recorded by the CNN,
one thing became clear: the US are still not ready to deflect or
mitigate such an attack to an extent that would not affect considerably
the everyday life of its citizens. Read the full article. [Help Net Security]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
